# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1045 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1046 --- ## [No results found in Elastic dashboard \[ParseDMARC\]](https://discuss.elastic.co/t/no-results-found-in-elastic-dashboard-parsedmarc/297617)
**Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 12:56pm UTC](https://discuss.elastic.co/t/no-results-found-in-elastic-dashboard-parsedmarc/297617 "2022-02-21T12:56:55Z")
Hi all, Some time ago I created a dashboard with kibana and Elasticsearch importing DMARC mails with parsedmarc. I had some issues with kibana and nginx but those seem to be solved now. But when I open the dashboard, I… --- ## [Timestamps on Reports are Wrong when Rounding](https://discuss.elastic.co/t/timestamps-on-reports-are-wrong-when-rounding/297744)
**Author:** [@sigbo](https://discuss.elastic.co/u/sigbo)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 10:51am UTC](https://discuss.elastic.co/t/timestamps-on-reports-are-wrong-when-rounding/297744 "2022-02-21T10:51:23Z")
Hi, When generating reports, the timestamps of the chosen timerange is inserted on the very top of the page. When I try to create a report for last week, choosing "now-1w/w" in both "from" and "to", the "from" time is s… --- ## [Filter last X documents based on date, then do a metric aggregation](https://discuss.elastic.co/t/filter-last-x-documents-based-on-date-then-do-a-metric-aggregation/297721)
**Author:** [@neorus616](https://discuss.elastic.co/u/neorus616)\ **Replies:** 3\ **Last updated:** [February 21, 2022, 11:44am UTC](https://discuss.elastic.co/t/filter-last-x-documents-based-on-date-then-do-a-metric-aggregation/297721 "2022-02-21T11:44:15Z")
i have the following mapping in my ES: { "properties": { "id": { "type": "keyword", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "creationTime": { "type": "… --- ## [Fleet Server - Certificate Issues](https://discuss.elastic.co/t/fleet-server-certificate-issues/297749)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 11:43am UTC](https://discuss.elastic.co/t/fleet-server-certificate-issues/297749 "2022-02-21T11:43:13Z")
Hello When i try to register Fleet Server using a certificate, it is getting successfully registered. But the problem is, it is throwing "Generating self-signed certificate for Fleet Server" after executing the command … --- ## [How to schedule rule alert only on weekday and specific time](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145)
**Author:** [@ss02072805](https://discuss.elastic.co/u/ss02072805)\ **Replies:** 1\ **Last updated:** [February 4, 2022, 7:40pm UTC](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145 "2022-02-04T19:40:48Z")
Assume, in the Kibana Alerting Framework. this configuration set up for metrics reported with that process.name Alert Type : Metric Threshold, on this configuration how to step up alerting only on weekday and speci… --- ## [Logstash elasticsearch output - data\_stream\_auto\_routing](https://discuss.elastic.co/t/logstash-elasticsearch-output-data-stream-auto-routing/297624)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 10:58am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-data-stream-auto-routing/297624 "2022-02-21T10:58:42Z")
I'm a bit confused about the data\_stream\_auto\_routing option when using elasticsearch output to data streams in logstash. According to documentation: Automatically routes events by deriving the data stream name using … --- ## [Setting the default timestamp to a specific date](https://discuss.elastic.co/t/setting-the-default-timestamp-to-a-specific-date/297732)
**Author:** [@dendrin](https://discuss.elastic.co/u/dendrin)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 10:32am UTC](https://discuss.elastic.co/t/setting-the-default-timestamp-to-a-specific-date/297732 "2022-02-21T10:32:05Z")
Hi there, does anyone know how to change the default timestamp to a specific date? Currently, the timestamp field is populated with the current time in which the script is ran. I want to change that timestamp to always d… --- ## [Grok Expression "match anything until you find a number"](https://discuss.elastic.co/t/grok-expression-match-anything-until-you-find-a-number/297612)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 9:56am UTC](https://discuss.elastic.co/t/grok-expression-match-anything-until-you-find-a-number/297612 "2022-02-21T09:56:34Z")
Hi everyone, and thank you for your help. I'm struggling a bit because I can't write a correctly matching for Grok for this kind of pattern. The logs I'm trying to process are structured like this (they're IP addresses… --- ## [Comparing date in same document](https://discuss.elastic.co/t/comparing-date-in-same-document/297221)
**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 9:46am UTC](https://discuss.elastic.co/t/comparing-date-in-same-document/297221 "2022-02-21T09:46:17Z")
Hello Elastic Team, I have two dates fields with format 2022-02-10T23:00:00.000Z I want to compare them , but I don't want to compare the time. Only the date part like : 2022-02-10 I tried using Scripted Fields with … --- ## [Scripted fields not showing values](https://discuss.elastic.co/t/scripted-fields-not-showing-values/297442)
**Author:** [@jogeorge](https://discuss.elastic.co/u/jogeorge)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 9:42am UTC](https://discuss.elastic.co/t/scripted-fields-not-showing-values/297442 "2022-02-21T09:42:41Z")
Hi, I am new to Elasticsearch/Kibana tools. Here I have my application logs saved in Elasticsearch, and now i need to show some visualizations from the logged data. I can see the logged messages in console as below. … --- ## [Kibana Performance, Plugins and Task Manager](https://discuss.elastic.co/t/kibana-performance-plugins-and-task-manager/297567)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 9:34am UTC](https://discuss.elastic.co/t/kibana-performance-plugins-and-task-manager/297567 "2022-02-21T09:34:26Z")
Hello, My kibana servers have been acting up for a while now, and I was hoping someone here might have some insights. I have been having these issues for a while now, and the only advice I have really gotten to date is … --- ## [How to run docker container without any defined pipelines](https://discuss.elastic.co/t/how-to-run-docker-container-without-any-defined-pipelines/297736)
**Author:** [@DazDotOne](https://discuss.elastic.co/u/DazDotOne)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 9:11am UTC](https://discuss.elastic.co/t/how-to-run-docker-container-without-any-defined-pipelines/297736 "2022-02-21T09:11:02Z")
Is it possible to start logstash within it's docker container (docker.elastic.co/logstash/logstash:7.16.2) without any defined pipelines. Or is there a simple pipeline I can use that will prevent docker from shutting do… --- ## [Proper Way to Create a Zero Replica Priority Template](https://discuss.elastic.co/t/proper-way-to-create-a-zero-replica-priority-template/297729)
**Author:** [@JSylvia007](https://discuss.elastic.co/u/JSylvia007)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 8:44am UTC](https://discuss.elastic.co/t/proper-way-to-create-a-zero-replica-priority-template/297729 "2022-02-21T08:44:09Z")
Howdy! I run Elastic in my homelab to pull logs together, etc., and I've recently rebuild from the ground up with Elastic 8. Previously I would create a global template like this: PUT \_template/zeroreplicas { "order… --- ## [Drop event processor not working](https://discuss.elastic.co/t/drop-event-processor-not-working/297720)
**Author:** [@cd-t1-361](https://discuss.elastic.co/u/cd-t1-361)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 7:51am UTC](https://discuss.elastic.co/t/drop-event-processor-not-working/297720 "2022-02-21T07:51:09Z")
I'm wanting to exclude a particular event if the eventdata contains X value. I've also tried dropping based on just the event id, but for some reason i'm unable to get the event to get dropped & is still being processed. … --- ## [How to plot missing values in graph](https://discuss.elastic.co/t/how-to-plot-missing-values-in-graph/297582)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-plot-missing-values-in-graph/297582 "2022-02-21T08:22:16Z")
Version 7.9 I have certain numbers plotted in the xaxis from 1 to 54 , But the index does not have continuous value.So xaxis only plots numbers that are available like 7,15,10,22. My requirement is to show all the numb… --- ## [Could not communicate with fleet-server Checking API will retry](https://discuss.elastic.co/t/could-not-communicate-with-fleet-server-checking-api-will-retry/297629)
**Author:** [@Dulanjana\_Lakmal](https://discuss.elastic.co/u/Dulanjana_Lakmal)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 7:58am UTC](https://discuss.elastic.co/t/could-not-communicate-with-fleet-server-checking-api-will-retry/297629 "2022-02-21T07:58:25Z")
We have Could not communicate with the fleet-server Checking API will retry following error can you help for this --- ## [No Output shown on kibana](https://discuss.elastic.co/t/no-output-shown-on-kibana/297443)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 7:48am UTC](https://discuss.elastic.co/t/no-output-shown-on-kibana/297443 "2022-02-21T07:48:49Z")
Hi, I have parsed a few sample syslog messages through logstash. I am receiving the right output on the logstash cmd but nothing is displayed on the kibana dashboard. I need help in figuring out how to get the same. Th… --- ## [How to migrate my plugin using getAutoRefresh$ to newer version?](https://discuss.elastic.co/t/how-to-migrate-my-plugin-using-getautorefresh-to-newer-version/297579)
**Author:** [@kyh119](https://discuss.elastic.co/u/kyh119)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 7:12am UTC](https://discuss.elastic.co/t/how-to-migrate-my-plugin-using-getautorefresh-to-newer-version/297579 "2022-02-21T07:12:47Z")
Hi. I'm trying to develop a plugin that queries data in Elasticsearch every 5s and shows the data. I made it perfectly in version 7.11.1. However, after I upgraded my Elasticsearch nodes and kibana to 7.17.0, I'm stru… --- ## [Logstash stops producing data to RabbitMQ, but service running with no errors](https://discuss.elastic.co/t/logstash-stops-producing-data-to-rabbitmq-but-service-running-with-no-errors/297397)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 7:08am UTC](https://discuss.elastic.co/t/logstash-stops-producing-data-to-rabbitmq-but-service-running-with-no-errors/297397 "2022-02-21T07:08:59Z")
I'm using Filebeat to read from a file & push data to Logstash. Logstash is, in turn, publishing the data to RabbitMQ. But at times we stop receiving data in RabbitMQ. But the logstash service would be running and produ… --- ## [How to calculate conditional sum on y axis](https://discuss.elastic.co/t/how-to-calculate-conditional-sum-on-y-axis/296162)
**Author:** [@Priyanka\_Rajpal](https://discuss.elastic.co/u/Priyanka_Rajpal)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 4:55am UTC](https://discuss.elastic.co/t/how-to-calculate-conditional-sum-on-y-axis/296162 "2022-02-21T04:55:20Z")
Is there a way to represent/calculate the following for y axis : sum = 0; for all items in the index : if condition 1 : then sum = sum+ m if condition 2 : then sum= sum + (1.3m) if condition 3 : then sum = sum + (1.… --- ## [Winlogbeat infinite loop through evtx file and shipping duplicate events when manually shipping events from an evtx file. Starting v7.16.0 to v7.17](https://discuss.elastic.co/t/winlogbeat-infinite-loop-through-evtx-file-and-shipping-duplicate-events-when-manually-shipping-events-from-an-evtx-file-starting-v7-16-0-to-v7-17/297710)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 4:37am UTC](https://discuss.elastic.co/t/winlogbeat-infinite-loop-through-evtx-file-and-shipping-duplicate-events-when-manually-shipping-events-from-an-evtx-file-starting-v7-16-0-to-v7-17/297710 "2022-02-21T04:37:50Z")
Hi, since winlogbeat 7.16.0, when trying to manually ship logs, the beat loops through the evtx file and keeps resending duplicate events until you hit ctrl+C to stop it regardless of the setting no\_more\_events: stop. I … --- ## [How do I copy field from one input to another?](https://discuss.elastic.co/t/how-do-i-copy-field-from-one-input-to-another/297709)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 4:25am UTC](https://discuss.elastic.co/t/how-do-i-copy-field-from-one-input-to-another/297709 "2022-02-21T04:25:39Z")
Hi Team, I have server where messages are being parsed from file using grok expression and I have also messages coming from packetbeat shipper. I wanted to copy one field if certain criteria met into the one which is be… --- ## [Providing input to elasticsearch-keystore.bat programatically](https://discuss.elastic.co/t/providing-input-to-elasticsearch-keystore-bat-programatically/297670)
**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 4:08am UTC](https://discuss.elastic.co/t/providing-input-to-elasticsearch-keystore-bat-programatically/297670 "2022-02-21T04:08:41Z")
Hi, I need to add few settings to Elasticsearch keystore in windows using elasticsearch-keystore.bat file. Hence I tried the following from the windows command prompt: echo "mypwd" | D:\\Elasticsearch-7.17.0\\bin\\elastic… --- ## [Can i use http communication in ccs (remote cluster)?](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559)
**Author:** [@hyuil](https://discuss.elastic.co/u/hyuil)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 2:13am UTC](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559 "2022-02-21T02:13:21Z")
hi I'm asking this question because I don't know much even if I read the official document. What is the difference between sniff mode and proxy mode in the remote cluster? Does remote cluster connection only support t… --- ## [Changing roles after api key creation?](https://discuss.elastic.co/t/changing-roles-after-api-key-creation/297610)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 2:11am UTC](https://discuss.elastic.co/t/changing-roles-after-api-key-creation/297610 "2022-02-21T02:11:06Z")
Is it possible to change the permissions of an API key after creation or do you have to create a new key and change all the configurations every single time you want to grant access to a new index? --- ## [Changing Certificate Authority on an Elasticsearch 8 cluster-How to override the certificates created at install time](https://discuss.elastic.co/t/changing-certificate-authority-on-an-elasticsearch-8-cluster-how-to-override-the-certificates-created-at-install-time/297694)
**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 2:06am UTC](https://discuss.elastic.co/t/changing-certificate-authority-on-an-elasticsearch-8-cluster-how-to-override-the-certificates-created-at-install-time/297694 "2022-02-21T02:06:02Z")
Hi There, I have been experimenting and testing Elasticsearch 8 to assess migration and I am stuck at adding a new certificate authority CA to a newly setup cluster. I have setup a single node and a multi-node clusters… --- ## [Does the java new client support \_doc api?](https://discuss.elastic.co/t/does-the-java-new-client-support-doc-api/297444)
**Author:** [@dkskrkwrr](https://discuss.elastic.co/u/dkskrkwrr)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 1:31am UTC](https://discuss.elastic.co/t/does-the-java-new-client-support-doc-api/297444 "2022-02-21T01:31:00Z")
Hello, we are migrating from the Java Rest High Level Client to the New Rest Client. Currently, the java new rest client seems to support document create EndPoint only with \_create. I'm going to use \_doc Endpoint to au… --- ## [Filebeat issue with "cannot index event - dropping event"](https://discuss.elastic.co/t/filebeat-issue-with-cannot-index-event-dropping-event/297707)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [February 20, 2022, 11:34pm UTC](https://discuss.elastic.co/t/filebeat-issue-with-cannot-index-event-dropping-event/297707 "2022-02-20T23:34:23Z")
Hello, I'm using filebeat to parse logs from Elasticsearch audit logs in json format. I'm getting below warnings and don't know what to do with that: WARN \[elasticsearch\] elasticsearch/client.go:414 Cannot inde… --- ## [Non-compliant license for \[geohash\_grid aggregation on geo\_shape fields\]](https://discuss.elastic.co/t/non-compliant-license-for-geohash-grid-aggregation-on-geo-shape-fields/297702)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 2\ **Last updated:** [February 20, 2022, 9:52pm UTC](https://discuss.elastic.co/t/non-compliant-license-for-geohash-grid-aggregation-on-geo-shape-fields/297702 "2022-02-20T21:52:24Z")
Hi! Topic says it all. I'm trying to run a query to aggregate geo\_shape field on geohash\_grid. However, getting an error about non-compliant license: { "type": "security\_exception", "reason": "current license is no… --- ## [Ecs compatilibity](https://discuss.elastic.co/t/ecs-compatilibity/296732)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 1\ **Last updated:** [February 20, 2022, 9:04pm UTC](https://discuss.elastic.co/t/ecs-compatilibity/296732 "2022-02-20T21:04:51Z")
hello, I'm receiving a lot of logs regarding pipeline.ecs\_compatibility. The one way is to disable it, but if I would like to enable, which version should I choose ? I have ES and Logstash in latest version 7.16.3 [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1044) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1046)